Environment
- CB Response Server: 6.x
- Clustered Environment
- Eventless Master Server
Objective
Convert an eventless master to start ingesting events
Resolution
- Open an SSH session with the master server
- Stop services
- Set the master to collect events
- Start services
Additional Notes
- Ensure the master server has sufficient resources to begin collecting and storing data.
- Event collection on the master can be disabled by the steps above, but using the value False instead of True in step 3.
Related Content